Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
File:                     946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json)
Hash identifier:          sz8vnTVbNHnRsSasc93FHg23Qzj+XOkPhOs23pEqZQc=
Subject key identifier:   6F:15:19:14:6A:D6:B0:63:3B:36:F1:3E:F7:8B:0E:E1:74:F3:92:CF
Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
Certificate issuer:       /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
Certificate serial:       0933C1F16DBB33A27A7A3065BE21ABB50D6CA374
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
Manifest number:          0164
Signing time:             Thu 26 Feb 2026 03:13:04 +0000
Manifest this update:     Thu 26 Feb 2026 03:08:04 +0000
Manifest next update:     Fri 27 Feb 2026 05:22:04 +0000
Files and hashes:         1: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: Kdt6tQXGxTbBKGogyhSrIcV76H5o5vF6Y5jxtTHvAuQ=)
                          2: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=)
                          3: 326131343a373538343a333030333a3a2f34382d3438203d3e20313339323035.roa (hash: 9ZoNZzedjMW/hf781igM4diVUdg7uGMSYFboVTuDa9U=)
                          4: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=)
                          5: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:33:c1:f1:6d:bb:33:a2:7a:7a:30:65:be:21:ab:b5:0d:6c:a3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
        Validity
            Not Before: Feb 26 03:08:04 2026 GMT
            Not After : Feb 27 05:22:04 2026 GMT
        Subject: CN=6F1519146AD6B0633B36F13EF78B0EE174F392CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:a7:3f:f1:7f:15:08:46:b9:4b:ea:59:3c:
                    8c:b1:d0:db:54:16:88:a4:cc:78:c2:52:20:d6:43:
                    6d:33:78:66:9f:d5:4a:44:cd:91:57:d6:a5:14:18:
                    16:2c:de:64:a9:55:54:38:5c:1e:7c:8a:e0:61:27:
                    2c:9c:f0:c1:5c:d2:e9:bd:a7:e6:50:ec:b1:22:93:
                    0c:34:6f:d3:f0:65:53:93:28:4a:6e:43:b2:73:4d:
                    84:16:8d:af:c2:f7:77:4f:59:cd:de:90:fa:87:9b:
                    5f:f7:58:54:66:d0:4a:ca:ee:51:e8:54:11:9c:96:
                    76:db:fd:5f:85:27:40:cc:70:60:ea:8e:0c:05:09:
                    f6:c1:07:a1:b1:21:29:29:ea:1c:cc:2e:a6:91:2a:
                    e0:d5:6e:43:b6:19:d8:f9:57:b1:21:cc:88:f7:30:
                    f2:d8:46:37:22:79:34:25:3b:ce:c5:cf:cd:12:84:
                    24:25:09:11:bb:df:36:5a:b0:76:3e:b6:f5:d8:b9:
                    aa:7f:f7:f4:be:51:0a:49:9d:a9:ff:44:33:86:fa:
                    1b:e4:a3:5f:d2:50:34:fe:c3:44:00:72:8a:42:34:
                    d7:a5:cd:17:11:28:0a:b8:dd:60:2b:aa:67:a9:59:
                    f5:92:85:2e:7d:45:82:b8:09:f5:9e:6d:04:f3:2a:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:15:19:14:6A:D6:B0:63:3B:36:F1:3E:F7:8B:0E:E1:74:F3:92:CF
            X509v3 Authority Key Identifier:
                keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:63:c7:f0:eb:88:9d:62:c4:a9:c9:85:dd:48:a9:98:4e:5e:
         f8:31:e0:d7:e6:22:d5:26:07:47:ec:c0:e4:33:0e:0d:a9:82:
         5b:5d:11:83:21:58:21:48:21:57:78:0b:f9:2c:42:84:81:18:
         cb:3e:93:c7:da:49:2b:7f:f1:f3:c7:18:76:44:b1:db:95:fd:
         2a:29:a0:5f:26:2d:df:87:5b:98:7c:15:fe:44:76:3d:73:8c:
         67:82:6d:eb:61:75:8e:ac:ba:7a:c3:26:53:5c:58:35:5a:3d:
         4e:03:57:22:10:66:be:5f:31:45:38:55:91:40:dd:2b:3e:fd:
         3b:43:58:48:b8:dc:29:c0:17:bb:65:5e:87:41:a5:bc:fe:f3:
         49:aa:95:51:c0:b7:2c:03:d7:90:94:17:25:d3:e7:ce:50:3a:
         cd:4e:43:49:ee:db:fe:d5:0d:b2:61:22:69:9f:c4:1a:84:12:
         31:10:8e:96:4e:72:46:ca:45:7c:55:dc:84:e6:be:07:78:ac:
         d3:9d:01:9b:73:b0:88:11:b0:8a:79:3f:4c:b5:d5:75:a3:58:
         e9:f7:3f:3f:24:64:08:fc:a9:24:58:4d:1d:f8:ad:08:8f:e2:
         2b:ac:d1:5a:a4:e1:d6:49:e5:9f:d3:ec:2f:bf:ab:5f:78:40:
         52:d0:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----